Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Select2 is a popular jQuery plugin that upgrades native select boxes with search, multi-select, tagging, infinite scrolling and AJAX powered remote data. It is widely used on admin panels, configuration screens and forms where a long list of options would otherwise be unmanageable. Select2 does not set any cookies and does not phone home; the only data exchanged is the HTTP request that downloads its JavaScript and CSS, plus the optional AJAX endpoints configured by the operator.
Select2 is a jQuery plugin that replaces the native HTML select element with a richer interface. It adds free text search, multi-select, tagging, custom rendering, infinite scrolling for long lists, and AJAX integration to fetch options dynamically. On a website Select2 appears as a small JavaScript file plus a CSS file, loaded after jQuery from the same origin or from a public CDN such as cdnjs.cloudflare.com or cdn.jsdelivr.net.
Select2 does not set cookies, does not write to localStorage and does not collect telemetry. The plugin renders client side and only sends data over the network if the operator wires it to an AJAX backend, in which case the website operator controls every request.
Article 5(3) ePrivacy is not triggered because Select2 stores nothing on the user device. As with any third party JavaScript, loading the file from a US CDN transmits the visitor IP, which can require consent under recent European case law. AJAX requests configured by the operator must follow the GDPR principles of purpose limitation and data minimisation.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
cdnjs.cloudflare.com is operated by Cloudflare Inc. and cdn.jsdelivr.net by Cloudflare and Fastly Inc. Both providers are US controlled and certified under the EU-US Data Privacy Framework. Self-hosting Select2 on an EU server removes any cross-border transfer.
Self-hosted Select2 needs no specific consent. Public CDN deployments need either opt-in consent before the script loads or a documented legitimate interest assessment with a clear privacy notice.
Install Select2 through npm, bundle the JavaScript and CSS with the application code, ensure jQuery is also self-hosted, document the AJAX endpoints used by Select2 in the privacy notice if they query personal data, and consider modern alternatives such as Choices.js or native combobox patterns for new projects.
Websites using Select2 must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is not required for Select2 itself. When the plugin is loaded from a US CDN, document a short transfer impact assessment. When Select2 is used with an AJAX data source that queries personal data (customers, employees), the DPIA must focus on that AJAX backend, not on Select2.
Sample consent text
This website uses the Select2 plugin to provide searchable dropdown lists. Select2 itself does not set cookies. When the plugin queries data via AJAX, the request is sent to our own server and respects the same authentication and access rules as the rest of the website.
Third-party domains contacted
cdnjs.cloudflare.comcdn.jsdelivr.netselect2.orgThis service may collect user data. Ensure GDPR compliance with FlowConsent.
No. Select2 is a client side jQuery plugin and sets no cookies, uses no localStorage and performs no tracking.
Self-hosted Select2 needs no specific consent. Loading from a US CDN may require consent because the visitor IP is transmitted to a non-EU provider.
Legitimate interest under Article 6(1)(f) GDPR for self-hosted Select2. AJAX requests use the existing legal basis for the underlying data, typically contract performance or legitimate interest.
Only when loaded from cdnjs.cloudflare.com or cdn.jsdelivr.net. Self-hosting eliminates the transfer.
No. Document a short transfer impact assessment for CDN loading. A DPIA may apply to the AJAX backend if it processes large or sensitive personal data.
Install via npm, bundle with the application, self-host jQuery, secure the AJAX endpoints with authentication, log only the minimum and document the dropdown sources in the privacy notice when they query personal data.
Choices.js (no jQuery dependency), Tom Select, TomSelect for accessibility focused use, Slim Select, and native HTML combobox patterns built with datalist or custom elements.
Self-hosted Select2 needs no specific entry. For public CDN, mention the CDN provider, the IP transfer on each load and the applicable EU-US Data Privacy Framework or Standard Contractual Clauses basis.